You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
Out of the box, the Vault Agent Injector does not support other Auth Methods than the kubernetes method using annotations alone.
Describe the solution you'd like
It would be great to be able to configure the Auth Method of the Agent that gets injected based on annotation alone. For example, such annotations as:
vault.hashicorp.com/auth-type: cert # new annotation
vault.hashicorp.com/auth-path: auth/cert
vault.hashicorp.com/auth-config-name: pki-test # new annotation
vault.hashicorp.com/ca-cert: /certs/ca.pem
vault.hashicorp.com/client-cert: /certs/client.pem
vault.hashicorp.com/client-key: /certs/client-key.pem
Should be able to generate config that looks like this:
Describe alternatives you've considered
The obvious alternative is using the vault.hashicorp.com/agent-configmap annotation to configure the agent from an existing ConfigMap. However, this solution requires the ConfigMap in question to already exist in order to be consumed - to use it in a preexisting Helm chart for example, one would have to modify the chart to explicitly create the ConfigMap explicitly. This isn't very declarative and violates the decorator-like pattern of annotations if used extensively.
Additional context
I've submitted a pull request extending the existing code to support this feature, #213. Let me know how I can help to get this feature merged. More details are in that PR.
The text was updated successfully, but these errors were encountered:
Is your feature request related to a problem? Please describe.
Out of the box, the Vault Agent Injector does not support other Auth Methods than the
kubernetes
method using annotations alone.Describe the solution you'd like
It would be great to be able to configure the Auth Method of the Agent that gets injected based on annotation alone. For example, such annotations as:
Should be able to generate config that looks like this:
Describe alternatives you've considered
The obvious alternative is using the
vault.hashicorp.com/agent-configmap
annotation to configure the agent from an existing ConfigMap. However, this solution requires the ConfigMap in question to already exist in order to be consumed - to use it in a preexisting Helm chart for example, one would have to modify the chart to explicitly create the ConfigMap explicitly. This isn't very declarative and violates the decorator-like pattern of annotations if used extensively.Additional context
I've submitted a pull request extending the existing code to support this feature, #213. Let me know how I can help to get this feature merged. More details are in that PR.
The text was updated successfully, but these errors were encountered: